@vendoai/apps 0.4.0

package/dist/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,yEAAyE;AACzE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAImB,CAAC;AAEpD,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,sEAAsE;AACtE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;gCAKmB,CAAC;AAEpD;;;;;4DAK4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACjE"}

package/dist/cloud.js

@@ -0,0 +1,16 @@
+import { appDocumentSchema, appIdSchema, isoDateTimeSchema, } from "@vendoai/core";
+import { z } from "zod";
+/** 06-apps §1 — validated wire representation of a frozen share copy. */
+export const shareSnapshotSchema = z.object({
+    id: z.string(),
+    doc: appDocumentSchema,
+    createdAt: isoDateTimeSchema,
+}).passthrough();
+/** 06-apps §1 — validated wire representation of a publish record. */
+export const publishRecordSchema = z.object({
+    id: z.string(),
+    appId: appIdSchema,
+    version: z.string(),
+    createdAt: isoDateTimeSchema,
+}).passthrough();
+//# sourceMappingURL=cloud.js.map

package/dist/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,iBAAiB,GAIlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,iBAAiB;IACtB,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC,WAAW,EAAqC,CAAC;AAUpD,sEAAsE;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC,WAAW,EAAqC,CAAC"}

package/dist/e2b/index.d.ts

@@ -0,0 +1,30 @@
+import type { SandboxAdapter } from "../sandbox.js";
+export interface E2BSandboxOptions {
+    /** E2B API key. When omitted, the SDK reads E2B_API_KEY. */
+    apiKey?: string;
+    /** Provider machine lifetime and reconnect timeout, in milliseconds. */
+    timeoutMs?: number;
+}
+/** True when the optional `e2b` SDK resolves from this package, so callers can
+    avoid wiring an adapter whose first create() would die on a missing module.
+    Runtimes without `import.meta.resolve` (bundlers inline the dependency) are
+    treated as available. */
+export declare const e2bInstalled: () => boolean;
+/**
+ * execution-v2 — adapt an E2B sandbox to Vendo's provider-neutral seam.
+ *
+ * Seam mapping: create() boots from an optional E2B template (point-in-time
+ * snapshot ids double as templates); request() proxies HTTPS to the box's
+ * $PORT host (or an explicit port); snapshot() takes a reusable point-in-time
+ * checkpoint while the source keeps running; stop() is E2B's snapshot-
+ * preserving pause; destroy() kills the machine (paused or running) for good.
+ * allowedDomains rides E2B's provider-native network allowlist plus an
+ * all-traffic deny rule; undefined means unrestricted egress.
+ *
+ * The machine object also carries adapter-private exec/files used for
+ * bootstrap, diagnostics, and the dying v1 compat paths — they are NOT part
+ * of the public seam (the in-box agent owns the inside of the box).
+ * The optional SDK is imported only when create/resume is called.
+ */
+export declare const e2bSandbox: (options?: E2BSandboxOptions) => SandboxAdapter;
+//# sourceMappingURL=index.d.ts.map

package/dist/e2b/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/e2b/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,eAAe,CAAC;AAUpE,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAsGD;;;4BAG4B;AAC5B,eAAO,MAAM,YAAY,QAAO,OAQ/B,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU,GAAI,UAAS,iBAAsB,KAAG,cAuK5D,CAAC"}

package/dist/e2b/index.js

@@ -0,0 +1,273 @@
+import { VendoError } from "@vendoai/core";
+const DEFAULT_TIMEOUT_MS = 300_000;
+/** Throttle for sliding the provider deadline on request activity. */
+const TTL_EXTEND_INTERVAL_MS = 60_000;
+const DEFAULT_PORT = 8080;
+const SNAPSHOT_REF_PREFIX = "e2b:v2:";
+/** Refs minted by the retired v1 adapter, still present in persisted app documents. */
+const LEGACY_SNAPSHOT_REF_PREFIX = "e2b:v1:";
+const toArrayBuffer = (value) => value.slice().buffer;
+const responseHeaders = (headers) => Object.fromEntries(headers.entries());
+const parsePort = (env) => {
+    const port = Number(env.PORT ?? DEFAULT_PORT);
+    return Number.isInteger(port) && port > 0 && port <= 65_535 ? port : DEFAULT_PORT;
+};
+const encodeSnapshotRef = (snapshotId, sourceSandboxId, allowedDomains, port) => `${SNAPSHOT_REF_PREFIX}${Buffer.from(JSON.stringify({
+    version: 2,
+    snapshotId,
+    sourceSandboxId,
+    ...(allowedDomains === undefined ? {} : { allowedDomains: [...allowedDomains] }),
+    port,
+})).toString("base64url")}`;
+const validPort = (value) => Number.isInteger(value) && value > 0 && value <= 65_535;
+const validDomains = (value) => value === undefined || (Array.isArray(value) && value.every((host) => typeof host === "string"));
+const decodePayload = (payload) => {
+    const value = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+    if (typeof value !== "object" || value === null)
+        throw new Error("not an object");
+    return value;
+};
+const decodeSnapshotRef = (snapshotRef) => {
+    try {
+        if (snapshotRef.startsWith(SNAPSHOT_REF_PREFIX) && snapshotRef.length > SNAPSHOT_REF_PREFIX.length) {
+            const state = decodePayload(snapshotRef.slice(SNAPSHOT_REF_PREFIX.length));
+            if (state.version !== 2 || typeof state.snapshotId !== "string" || state.snapshotId.length === 0) {
+                throw new Error("invalid snapshot id");
+            }
+            if (!validPort(state.port))
+                throw new Error("invalid port");
+            if (!validDomains(state.allowedDomains))
+                throw new Error("invalid allowedDomains policy");
+            if (state.sourceSandboxId !== undefined
+                && (typeof state.sourceSandboxId !== "string" || state.sourceSandboxId.length === 0)) {
+                throw new Error("invalid source sandbox id");
+            }
+            return {
+                snapshotId: state.snapshotId,
+                ...(state.sourceSandboxId === undefined ? {} : { sourceSandboxId: state.sourceSandboxId }),
+                ...(state.allowedDomains === undefined ? {} : { allowedDomains: [...state.allowedDomains] }),
+                port: state.port,
+            };
+        }
+        if (snapshotRef.startsWith(LEGACY_SNAPSHOT_REF_PREFIX) && snapshotRef.length > LEGACY_SNAPSHOT_REF_PREFIX.length) {
+            const state = decodePayload(snapshotRef.slice(LEGACY_SNAPSHOT_REF_PREFIX.length));
+            if (state.version !== 1 || typeof state.snapshotId !== "string" || state.snapshotId.length === 0) {
+                throw new Error("invalid snapshot id");
+            }
+            if (!validPort(state.port))
+                throw new Error("invalid port");
+            if (!validDomains(state.egress))
+                throw new Error("invalid egress policy");
+            return {
+                snapshotId: state.snapshotId,
+                ...(state.egress === undefined ? {} : { allowedDomains: [...state.egress] }),
+                port: state.port,
+            };
+        }
+        throw new Error("unknown prefix");
+    }
+    catch {
+        throw new VendoError("validation", "E2B snapshot references must start with e2b:v2: (or the retired e2b:v1:) and carry a valid payload");
+    }
+};
+const networkOptions = (allowedDomains, allTraffic) => allowedDomains === undefined
+    ? { allowInternetAccess: true }
+    : { network: { allowOut: [...allowedDomains], denyOut: [allTraffic] } };
+/** True when the optional `e2b` SDK resolves from this package, so callers can
+    avoid wiring an adapter whose first create() would die on a missing module.
+    Runtimes without `import.meta.resolve` (bundlers inline the dependency) are
+    treated as available. */
+export const e2bInstalled = () => {
+    if (typeof import.meta.resolve !== "function")
+        return true;
+    try {
+        import.meta.resolve("e2b");
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * execution-v2 — adapt an E2B sandbox to Vendo's provider-neutral seam.
+ *
+ * Seam mapping: create() boots from an optional E2B template (point-in-time
+ * snapshot ids double as templates); request() proxies HTTPS to the box's
+ * $PORT host (or an explicit port); snapshot() takes a reusable point-in-time
+ * checkpoint while the source keeps running; stop() is E2B's snapshot-
+ * preserving pause; destroy() kills the machine (paused or running) for good.
+ * allowedDomains rides E2B's provider-native network allowlist plus an
+ * all-traffic deny rule; undefined means unrestricted egress.
+ *
+ * The machine object also carries adapter-private exec/files used for
+ * bootstrap, diagnostics, and the dying v1 compat paths — they are NOT part
+ * of the public seam (the in-box agent owns the inside of the box).
+ * The optional SDK is imported only when create/resume is called.
+ */
+export const e2bSandbox = (options = {}) => {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const wrap = (sandbox, state) => {
+        const baseUrl = (port) => `https://${sandbox.getHost(port)}`;
+        // Seam rule: sleeping or destroying twice is not an error, and destroy is
+        // final. The one-shot promises make that hold under concurrency too —
+        // each transition is assigned synchronously, so racing callers share one
+        // provider call instead of issuing duplicate pause()/kill()s, and a
+        // destroy during an in-flight pause serializes after it.
+        let sleeping;
+        let destroying;
+        // E2B's timeoutMs is a HARD deadline fixed at create/resume — proxied
+        // traffic does not extend it, so a busy box would be provider-killed
+        // mid-session (before the idle lifecycle ever snapshots it). Slide the
+        // deadline on activity instead: best-effort and throttled, so the idle
+        // auto-sleep — not the provider TTL — decides when the machine stops.
+        let ttlExtendedAt = 0;
+        const extendTtl = () => {
+            const now = Date.now();
+            if (now - ttlExtendedAt < TTL_EXTEND_INTERVAL_MS)
+                return;
+            ttlExtendedAt = now;
+            void Promise.resolve(sandbox.setTimeout(timeoutMs)).catch(() => undefined);
+        };
+        return {
+            id: sandbox.sandboxId,
+            async request(request) {
+                extendTtl();
+                const response = await fetch(`${baseUrl(request.port ?? state.port)}${request.path.startsWith("/") ? request.path : `/${request.path}`}`, {
+                    method: request.method,
+                    headers: request.headers,
+                    body: request.body === undefined
+                        ? undefined
+                        : typeof request.body === "string"
+                            ? request.body
+                            : toArrayBuffer(request.body),
+                });
+                // The e2b ingress answers 502 for BOTH "app port not open yet" (boot
+                // race, retried above the seam) and "sandbox reaped" (TTL, sweep).
+                // Only the SDK knows which: a dead sandbox becomes the seam's thrown
+                // not-found (the lifecycle evicts the live entry and re-wakes from
+                // the durable ref); an inconclusive probe fails open to the plain 502.
+                if (response.status === 502) {
+                    const running = await sandbox.isRunning().catch(() => true);
+                    if (!running) {
+                        throw new VendoError("not-found", `e2b sandbox ${sandbox.sandboxId} is gone (reaped by the provider)`);
+                    }
+                }
+                return {
+                    status: response.status,
+                    headers: responseHeaders(response.headers),
+                    body: new Uint8Array(await response.arrayBuffer()),
+                };
+            },
+            async url(port) {
+                return baseUrl(port ?? state.port);
+            },
+            async snapshot() {
+                const snapshot = await sandbox.createSnapshot();
+                return encodeSnapshotRef(snapshot.snapshotId, sandbox.sandboxId, state.allowedDomains, state.port);
+            },
+            async stop() {
+                if (destroying !== undefined) {
+                    await destroying;
+                    return;
+                }
+                sleeping ??= sandbox.pause().then(() => undefined);
+                await sleeping;
+            },
+            async destroy() {
+                destroying ??= (sleeping ?? Promise.resolve())
+                    .catch(() => undefined)
+                    .then(() => sandbox.kill())
+                    .then(() => undefined);
+                await destroying;
+            },
+            // ——— adapter-private below this line (bootstrap/diagnostics + v1 compat) ———
+            async exec(cmd, execOptions) {
+                // Box bootstrap and diagnostics are activity too — a minutes-long
+                // command sequence must slide the provider deadline like requests do.
+                extendTtl();
+                try {
+                    const result = await sandbox.commands.run(cmd, {
+                        ...(execOptions?.cwd === undefined ? {} : { cwd: execOptions.cwd }),
+                        timeoutMs: execOptions?.timeoutMs ?? timeoutMs,
+                    });
+                    return { code: result.exitCode, stdout: result.stdout, stderr: result.stderr };
+                }
+                catch (error) {
+                    if (typeof error === "object" && error !== null &&
+                        typeof error.exitCode === "number" &&
+                        typeof error.stdout === "string" &&
+                        typeof error.stderr === "string") {
+                        const result = error;
+                        return { code: result.exitCode, stdout: result.stdout, stderr: result.stderr };
+                    }
+                    throw error;
+                }
+            },
+            files: {
+                async read(path) {
+                    return sandbox.files.read(path, { format: "bytes" });
+                },
+                async write(path, bytes) {
+                    await sandbox.files.write(path, typeof bytes === "string" ? bytes : toArrayBuffer(bytes));
+                },
+                async list(dir) {
+                    return (await sandbox.files.list(dir)).map((entry) => entry.name);
+                },
+            },
+        };
+    };
+    return {
+        async create(spec) {
+            // Optional SDK: keep it a runtime import so hosts without e2b installed
+            // don't fail Next's (webpack/Turbopack) bundling of the vendo route.
+            const { ALL_TRAFFIC, Sandbox } = await import(/* webpackIgnore: true */ /* turbopackIgnore: true */ "e2b");
+            const allowedDomains = spec.allowedDomains;
+            const createOptions = {
+                ...(options.apiKey === undefined ? {} : { apiKey: options.apiKey }),
+                envs: spec.env,
+                timeoutMs,
+                ...networkOptions(allowedDomains, ALL_TRAFFIC),
+            };
+            const sandbox = spec.template === undefined
+                ? await Sandbox.create(createOptions)
+                : await Sandbox.create(spec.template, createOptions);
+            return wrap(sandbox, { allowedDomains, port: parsePort(spec.env) });
+        },
+        async resume(snapshotRef, policy) {
+            const state = decodeSnapshotRef(snapshotRef);
+            // Lane E — a wake enforces the CURRENT egress policy when the caller
+            // passes one; the snapshot-time allowlist applies only to a bare resume.
+            const allowedDomains = policy === undefined ? state.allowedDomains : policy.allowedDomains;
+            const { ALL_TRAFFIC, Sandbox } = await import(/* webpackIgnore: true */ /* turbopackIgnore: true */ "e2b");
+            return wrap(await Sandbox.create(state.snapshotId, {
+                ...(options.apiKey === undefined ? {} : { apiKey: options.apiKey }),
+                timeoutMs,
+                ...networkOptions(allowedDomains, ALL_TRAFFIC),
+            }), { ...state, allowedDomains });
+        },
+        async destroy(snapshotRef) {
+            const state = decodeSnapshotRef(snapshotRef);
+            const { NotFoundError, Sandbox } = await import(/* webpackIgnore: true */ /* turbopackIgnore: true */ "e2b");
+            const apiOptions = options.apiKey === undefined ? {} : { apiKey: options.apiKey };
+            // Best-effort reap of the sandbox the sleep flow left paused behind this
+            // ref (recorded by v2 refs; absent from retired v1 refs). It is usually
+            // already gone — the machine's own destroy() killed it — so any failure
+            // here is not this call's problem.
+            if (state.sourceSandboxId !== undefined) {
+                await Sandbox.kill(state.sourceSandboxId, apiOptions).catch(() => undefined);
+            }
+            try {
+                await Sandbox.deleteSnapshot(state.snapshotId, apiOptions);
+            }
+            catch (error) {
+                // Idempotent by seam contract: already-deleted state is a no-op. The
+                // name fallback covers an SDK bump or bundler duplicating the class.
+                const notFound = error instanceof NotFoundError
+                    || (error instanceof Error && error.name === "NotFoundError");
+                if (!notFound)
+                    throw error;
+            }
+        },
+    };
+};
+//# sourceMappingURL=index.js.map

package/dist/e2b/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/e2b/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,sEAAsE;AACtE,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,mBAAmB,GAAG,SAAS,CAAC;AACtC,uFAAuF;AACvF,MAAM,0BAA0B,GAAG,SAAS,CAAC;AAmB7C,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAe,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAqB,CAAC;AAE9F,MAAM,eAAe,GAAG,CAAC,OAAgB,EAA0B,EAAE,CACnE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;AAYxC,MAAM,SAAS,GAAG,CAAC,GAA2B,EAAU,EAAE;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AACpF,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,UAAkB,EAClB,eAAuB,EACvB,cAAoC,EACpC,IAAY,EACJ,EAAE,CACV,GAAG,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;IAClD,OAAO,EAAE,CAAC;IACV,UAAU;IACV,eAAe;IACf,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC;IAChF,IAAI;CACsB,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAEzD,MAAM,SAAS,GAAG,CAAC,KAAc,EAAmB,EAAE,CACpD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAK,KAAgB,IAAI,MAAM,CAAC;AAElF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiC,EAAE,CACrE,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;AAEnG,MAAM,aAAa,GAAG,CAAC,OAAe,EAA2B,EAAE;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IACxF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAClF,OAAO,KAAgC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,WAAmB,EAAqC,EAAE;IACnF,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACnG,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3E,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjG,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC1F,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;mBAClC,CAAC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1F,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5F,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,CAAC,UAAU,CAAC,0BAA0B,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,0BAA0B,CAAC,MAAM,EAAE,CAAC;YACjH,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;YAClF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjG,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC1E,OAAO;gBACL,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5E,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,oGAAoG,CAAC,CAAC;IAC3I,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,cAAoC,EAAE,UAAkB,EAAE,EAAE,CAClF,cAAc,KAAK,SAAS;IAC1B,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAa,EAAE;IACxC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;AAE5E;;;4BAG4B;AAC5B,MAAM,CAAC,MAAM,YAAY,GAAG,GAAY,EAAE;IACxC,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,UAA6B,EAAE,EAAkB,EAAE;IAC5E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAE1D,MAAM,IAAI,GAAG,CACX,OAAmB,EACnB,KAA8D,EAC9C,EAAE;QAClB,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,WAAW,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,0EAA0E;QAC1E,sEAAsE;QACtE,yEAAyE;QACzE,oEAAoE;QACpE,yDAAyD;QACzD,IAAI,QAAmC,CAAC;QACxC,IAAI,UAAqC,CAAC;QAC1C,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,aAAa,GAAG,sBAAsB;gBAAE,OAAO;YACzD,aAAa,GAAG,GAAG,CAAC;YACpB,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC,CAAC;QAEF,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,SAAS;YACrB,KAAK,CAAC,OAAO,CAAC,OAAO;gBACnB,SAAS,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE;oBACxI,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS;wBAC9B,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;4BAChC,CAAC,CAAC,OAAO,CAAC,IAAI;4BACd,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,qEAAqE;gBACrE,mEAAmE;gBACnE,qEAAqE;gBACrE,mEAAmE;gBACnE,uEAAuE;gBACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;oBAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,eAAe,OAAO,CAAC,SAAS,mCAAmC,CAAC,CAAC;oBACzG,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC1C,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;iBACnD,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAa;gBACrB,OAAO,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YACD,KAAK,CAAC,QAAQ;gBACZ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;gBAChD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrG,CAAC;YACD,KAAK,CAAC,IAAI;gBACR,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,UAAU,CAAC;oBACjB,OAAO;gBACT,CAAC;gBACD,QAAQ,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,QAAQ,CAAC;YACjB,CAAC;YACD,KAAK,CAAC,OAAO;gBACX,UAAU,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;qBAC3C,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;qBACtB,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;qBAC1B,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzB,MAAM,UAAU,CAAC;YACnB,CAAC;YACD,8EAA8E;YAC9E,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,WAAkD;gBACxE,kEAAkE;gBAClE,sEAAsE;gBACtE,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;wBAC7C,GAAG,CAAC,WAAW,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC;wBACnE,SAAS,EAAE,WAAW,EAAE,SAAS,IAAI,SAAS;qBAC/C,CAAC,CAAC;oBACH,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;wBAC7C,OAAQ,KAAgC,CAAC,QAAQ,KAAK,QAAQ;wBAC9D,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ;wBAC1D,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC7D,MAAM,MAAM,GAAG,KAA6D,CAAC;wBAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;oBACjF,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,KAAK,EAAE;gBACL,KAAK,CAAC,IAAI,CAAC,IAAY;oBACrB,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,KAA0B;oBAClD,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5F,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,GAAW;oBACpB,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpE,CAAC;aACF;SACmE,CAAC;IACzE,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAmB;YAC9B,wEAAwE;YACxE,qEAAqE;YACrE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAC3G,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;YAC3C,MAAM,aAAa,GAAG;gBACpB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnE,IAAI,EAAE,IAAI,CAAC,GAAG;gBACd,SAAS;gBACT,GAAG,cAAc,CAAC,cAAc,EAAE,WAAW,CAAC;aAC/C,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS;gBACzC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;gBACrC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM;YAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAC7C,qEAAqE;YACrE,yEAAyE;YACzE,MAAM,cAAc,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;YAC3F,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAC3G,OAAO,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE;gBACjD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnE,SAAS;gBACT,GAAG,cAAc,CAAC,cAAc,EAAE,WAAW,CAAC;aAC/C,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,WAAW;YACvB,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAC7G,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAClF,yEAAyE;YACzE,wEAAwE;YACxE,wEAAwE;YACxE,mCAAmC;YACnC,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qEAAqE;gBACrE,qEAAqE;gBACrE,MAAM,QAAQ,GAAG,KAAK,YAAY,aAAa;uBAC1C,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/egress-approval.d.ts

@@ -0,0 +1,73 @@
+import { type AppDocument, type AppId, type ApprovalId, type IsoDateTime, type StoreAdapter } from "@vendoai/core";
+/**
+ * execution-v2 Wave 2 Lane E — grant-style egress approval
+ * (spec "Secrets and egress", docs/superpowers/specs/2026-07-19-execution-v2-design.md).
+ *
+ * The app's `egress` declaration (mirroring `vendo.json`) is an ASK, not an
+ * authority: each declared domain needs a one-time owner approval before a
+ * machine may provision or wake with it. The flow reuses the guard's existing
+ * critical-approval machinery (the ENG-345 exposure-grant pattern — no new
+ * ceremony types): an unapproved declaration parks ONE approval naming the
+ * missing domains, and the decision seam commits them onto the app document's
+ * `egressApproved` field. This module owns the pure policy math and the store
+ * of parked requests; the runtime owns the guard round-trip.
+ *
+ * Grant hygiene mirrors ENG-345 structurally where it can: parked requests
+ * live in their own collection keyed by app id (a copy's fresh id has none),
+ * and the doc-stored `egressApproved` field is stripped at every copy mint
+ * (fork/share/publish; interchange strips by field whitelist).
+ */
+export interface EgressApprovalRequest {
+    appId: AppId;
+    /** One normalized declared domain awaiting the owner's decision. */
+    domain: string;
+    /** The app owner's principal subject — the only principal who may approve. */
+    owner: string;
+    /** The parked guard approval that decides this domain (06-apps §9 model). */
+    approvalId: ApprovalId;
+    requestedAt: IsoDateTime;
+}
+/** Domains compare case-insensitively; declarations may carry stray spacing. */
+export declare const normalizeEgressDomain: (domain: string) => string;
+/** Declared-but-not-yet-approved domains — what still needs an owner grant. */
+export declare const unapprovedEgress: (app: AppDocument) => string[];
+/**
+ * The allowlist a machine boots or wakes with — the ONE place the box's
+ * effective egress policy is assembled. Two rules:
+ *
+ * 1. Declared domains must ALL be approved: any unapproved declaration is a
+ *    loud VendoError naming the missing domains (a machine never provisions
+ *    or wakes half-approved), on every path including ctx-less ones like a
+ *    schedule wake.
+ * 2. The implicit skin domains ride every allowlist unconditionally: the
+ *    inference endpoint, the host-callback surface, and the store surface are
+ *    the box's OWN boundary (env half of the skin contract) — a box that
+ *    cannot reach its own skin is broken, so these are never subject to
+ *    declaration or approval. The host assembles them from the same URLs it
+ *    injects as VENDO_STORE_URL / VENDO_HOST_URL / VENDO_INFERENCE_URL.
+ *
+ * An app that declares nothing gets the implicit skin domains only: v2
+ * machine egress is deny-by-default at the network layer (the SSRF and
+ * exfil answer, including for the BYO-model-key case).
+ */
+export declare const boxAllowlist: (app: AppDocument, implicitDomains: readonly string[]) => string[];
+/**
+ * Persistence for PARKED egress approvals only. Approved state lives on the
+ * app document (`egressApproved`), so a parked record exists exactly while an
+ * approval card is undecided; both decisions clear it (approval commits to
+ * the doc first, denial just clears — fail closed).
+ */
+export interface EgressApprovals {
+    /** Parked requests for one app. */
+    pending(appId: AppId): Promise<EgressApprovalRequest[]>;
+    /** Park one domain on a guard approval (re-parking the same domain overwrites). */
+    putPending(request: EgressApprovalRequest): Promise<void>;
+    /** Parked requests riding a specific guard approval id. */
+    byApproval(approvalId: ApprovalId): Promise<EgressApprovalRequest[]>;
+    /** Clear one parked domain (its approval was decided, either way). */
+    remove(appId: AppId, domain: string): Promise<void>;
+    /** Delete every parked request for one app (app deletion cleanup). */
+    clearForApp(appId: AppId): Promise<void>;
+}
+export declare const createEgressApprovals: (store: StoreAdapter) => EgressApprovals;
+//# sourceMappingURL=egress-approval.d.ts.map

package/dist/egress-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress-approval.d.ts","sourceRoot":"","sources":["../src/egress-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,eAAe,CAAC;AAGvB;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,KAAK,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,KAAG,MAAqC,CAAC;AAK7F,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,GAAI,KAAK,WAAW,KAAG,MAAM,EAGzD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,YAAY,GAAI,KAAK,WAAW,EAAE,iBAAiB,SAAS,MAAM,EAAE,KAAG,MAAM,EAUzF,CAAC;AAYF;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACxD,mFAAmF;IACnF,UAAU,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,2DAA2D;IAC3D,UAAU,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACrE,sEAAsE;IACtE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,sEAAsE;IACtE,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,eAAO,MAAM,qBAAqB,GAAI,OAAO,YAAY,KAAG,eAiC3D,CAAC"}

package/dist/egress-approval.js

@@ -0,0 +1,74 @@
+import { VendoError, } from "@vendoai/core";
+import { listAllRecords } from "./persistence.js";
+/** Domains compare case-insensitively; declarations may carry stray spacing. */
+export const normalizeEgressDomain = (domain) => domain.trim().toLowerCase();
+const normalizeList = (domains) => [...new Set((domains ?? []).map(normalizeEgressDomain))].filter((domain) => domain !== "");
+/** Declared-but-not-yet-approved domains — what still needs an owner grant. */
+export const unapprovedEgress = (app) => {
+    const approved = new Set(normalizeList(app.egressApproved));
+    return normalizeList(app.egress).filter((domain) => !approved.has(domain));
+};
+/**
+ * The allowlist a machine boots or wakes with — the ONE place the box's
+ * effective egress policy is assembled. Two rules:
+ *
+ * 1. Declared domains must ALL be approved: any unapproved declaration is a
+ *    loud VendoError naming the missing domains (a machine never provisions
+ *    or wakes half-approved), on every path including ctx-less ones like a
+ *    schedule wake.
+ * 2. The implicit skin domains ride every allowlist unconditionally: the
+ *    inference endpoint, the host-callback surface, and the store surface are
+ *    the box's OWN boundary (env half of the skin contract) — a box that
+ *    cannot reach its own skin is broken, so these are never subject to
+ *    declaration or approval. The host assembles them from the same URLs it
+ *    injects as VENDO_STORE_URL / VENDO_HOST_URL / VENDO_INFERENCE_URL.
+ *
+ * An app that declares nothing gets the implicit skin domains only: v2
+ * machine egress is deny-by-default at the network layer (the SSRF and
+ * exfil answer, including for the BYO-model-key case).
+ */
+export const boxAllowlist = (app, implicitDomains) => {
+    const unapproved = unapprovedEgress(app);
+    if (unapproved.length > 0) {
+        throw new VendoError("blocked", `machine egress is not approved for: ${unapproved.join(", ")}`, { unapprovedDomains: unapproved });
+    }
+    return [...new Set([...normalizeList(app.egress), ...normalizeList(implicitDomains)])];
+};
+/** Deterministic id so re-requesting the same (app, domain) overwrites, never duplicates. */
+const recordId = (appId, domain) => `egr_${appId}__${domain}`;
+const COLLECTION = "vendo_egress_approval";
+const requestData = (record) => record.data;
+const listAll = (store, refs) => listAllRecords(store.records(COLLECTION), { refs });
+export const createEgressApprovals = (store) => {
+    const collection = store.records(COLLECTION);
+    const refsFor = (request) => ({
+        subject: request.owner,
+        app_id: request.appId,
+        domain: request.domain,
+        approval: request.approvalId,
+    });
+    return {
+        async pending(appId) {
+            return (await listAll(store, { app_id: appId })).map(requestData);
+        },
+        async putPending(request) {
+            await collection.put({
+                id: recordId(request.appId, request.domain),
+                data: request,
+                refs: refsFor(request),
+            });
+        },
+        async byApproval(approvalId) {
+            return (await listAll(store, { approval: approvalId })).map(requestData);
+        },
+        async remove(appId, domain) {
+            await collection.delete(recordId(appId, domain));
+        },
+        async clearForApp(appId) {
+            for (const record of await listAll(store, { app_id: appId })) {
+                await collection.delete(record.id);
+            }
+        },
+    };
+};
+//# sourceMappingURL=egress-approval.js.map

package/dist/egress-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress-approval.js","sourceRoot":"","sources":["../src/egress-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,GAOX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgClD,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAE7F,MAAM,aAAa,GAAG,CAAC,OAAsC,EAAY,EAAE,CACzE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;AAE7F,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAgB,EAAY,EAAE;IAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5D,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAgB,EAAE,eAAkC,EAAY,EAAE;IAC7F,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAClB,SAAS,EACT,uCAAuC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF,6FAA6F;AAC7F,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAE,MAAc,EAAU,EAAE,CAAC,OAAO,KAAK,KAAK,MAAM,EAAE,CAAC;AAErF,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAE3C,MAAM,WAAW,GAAG,CAAC,MAAmB,EAAyB,EAAE,CAAC,MAAM,CAAC,IAA6B,CAAC;AAEzG,MAAM,OAAO,GAAG,CAAC,KAAmB,EAAE,IAA4B,EAA0B,EAAE,CAC5F,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAqBtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAmB,EAAmB,EAAE;IAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG,CAAC,OAA8B,EAA0B,EAAE,CAAC,CAAC;QAC3E,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,MAAM,EAAE,OAAO,CAAC,KAAK;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,UAAU,CAAC,GAAG,CAAC;gBACnB,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;gBAC3C,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;aACvB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,UAAU;YACzB,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;YACxB,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,KAAK,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC7D,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}